Skip to content

[RBAC] az ad group show: fix --group value treated as regex problem #12426

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
arrownj merged 7 commits into from
Mar 6, 2020
Merged

[RBAC] az ad group show: fix --group value treated as regex problem #12426

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
ba43dc7
[RBAC] az ad group show: fix --group value treated as regex problem
arrownj Mar 3, 2020
e3ec50b
{RBAC} update syntax error of error message
arrownj Mar 4, 2020
04f4e5a
{RBAC} retrieve domain from az ad signed-in-user show instead of hard…
arrownj Mar 4, 2020
a7588bf
{RBAC} refactor validate_group function
arrownj Mar 5, 2020
11d1fbb
{RBAC} update recording file for test_graph_group_idempotent
arrownj Mar 5, 2020
91e4051
{RBAC} update test_graph
arrownj Mar 5, 2020
73d9004
{RBAC} update test_graph to use the right user info
arrownj Mar 5, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 20 additions & 11 deletions src/azure-cli/azure/cli/command_modules/role/_validators.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,25 +13,34 @@
VARIANT_GROUP_ID_ARGS = ['object_id', 'group_id', 'group_object_id']


def _get_group_count_and_id(namespace, group_filter):
client = _graph_client_factory(namespace.cmd.cli_ctx)
result = list(client.groups.list(filter=group_filter))
return len(result), result[0].object_id if len(result) == 1 else None


def validate_group(namespace):
# For AD auto-commands, here we resolve logic names to object ids needed by SDK methods
attr, value = next(((x, getattr(namespace, x)) for x in VARIANT_GROUP_ID_ARGS
if hasattr(namespace, x)))
try:
uuid.UUID(value)
except ValueError:
client = _graph_client_factory(namespace.cmd.cli_ctx)
sub_filters = []
sub_filters.append("startswith(displayName,'{}')".format(value))
sub_filters.append("displayName eq '{}'".format(value))
result = list(client.groups.list(filter=' or '.join(sub_filters)))
count = len(result)
if count == 1:
setattr(namespace, attr, result[0].object_id)
elif count == 0:
raise CLIError("No group matches the name of '{}'".format(value))
exact_match_count, object_id = _get_group_count_and_id(namespace, "displayName eq '{}'".format(value))
if exact_match_count == 1:
setattr(namespace, attr, object_id)
elif exact_match_count == 0:
prefix_match_count, object_id = _get_group_count_and_id(
namespace, "startswith(displayName,'{}')".format(value)
)
if prefix_match_count == 1:
setattr(namespace, attr, object_id)
elif prefix_match_count == 0:
raise CLIError("No group matches the name of '{}'".format(value))
else:
raise CLIError("More than one group match the name of '{}'".format(value))
else:
raise CLIError("More than one groups match the name of '{}'".format(value))
raise CLIError("More than one group match the name of '{}'".format(value))
Copy link
Member

@jiasli jiasli Mar 6, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will never be reached. But yes, let's keep it in case the service doesn't return 0 or 1 item as expected.



def validate_member_id(namespace):
Expand Down
Loading